yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1170156] Re: Forbidden 403 error while get public image from multitenant swift storage where object is chunked (larger than 5GB)

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Wed, 29 May 2013 08:53:21 -0000
Reply-to: Bug 1170156 <1170156@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: glance
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Glance.
https://bugs.launchpad.net/bugs/1170156

Title:
  Forbidden 403 error while get public image from multitenant swift
  storage where object is chunked (larger than 5GB)

Status in OpenStack Image Registry and Delivery Service (Glance):
  Fix Released

Bug description:
  How to reproduce:
  1. Use multitenant swift store for glance.
  2. Create a public image larger than 5GB.
  3. Launch instance with this image from another tenant.

  How to fix:
  For chunked object not enough just ".r:*" acl permission for public image, we must also set ".rlistings" permission on container.

  Simple, in glance/store/swift.py (class MultiTenantStore, def set_acls),
  if public:
              headers['X-Container-Read'] = ".r:*,.rlistings"
   (may be, something this we must add for read_tenants acls)

To manage notifications about this bug go to:
https://bugs.launchpad.net/glance/+bug/1170156/+subscriptions